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This paper presents a tableau approach for deciding expressive description logics with full role negation and 
role identity. We consider the description logic ACBO^, which is the extension of ACC with the Boolean 
role operators, inverse of roles, the identity role, and includes full support for individuals and singleton 
... concepts. ACBO"* is expressively equivalent to the two-variable fragment of first-order logic with equality 

04 1 and subsumes Boolean modal logic. In this paper we define a sound and complete tableau calculus for the 

ACBO"* that provides a basis for decision procedures for this logic and all its sublogics. An important novelty 
C _ ) of our approach is the use of a generic unrestricted blocking mechanism. Being based on a conceptually 

■ simple rule, unrestricted blocking performs case distinctions over whether two individuals are equal or not 

and equality reasoning to find finite models. The blocking mechanism ties the proof of termination of tableau 
derivations to the finite model property of ACBO" 1 . 
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1. INTRODUCTION 

Mainstream description logics languages and ontology web languages are equipped 
with a rich supply of syntactic constructs and operators for supporting the needs of 
various applications. In these languages the support of concepts and roles, the main 
syntactic entities in description logic languages, is is slightly uneven however. A no- 
l-J ; table absence is the negation operator for roles. In the description logic ACC and other 

c/j , popular extensions of ACC it is possible to define a spam filter as a mechanism for fil- 

tering out spam emails, and a sound spam filter as a spam filter that filters out only 
spam emails, by specifying 



o 



'p,- spam-filter = mechanism n 3filter-out.spam-email and 

■ sound-spam-filter = spam-filter n ^3filter-out.->spam-email. 

It is not possible however to define a complete spam filter as a spam filter that filters 
out every spam email. With role negation this can be expressed by the following. 

00 

O 1 complete-spam-filter = spam-filter n -lEhfilter-out.spam-email. 

CN 

The first occurrence of negation is a concept negation operator, which almost all de- 
scription logics support, while the second occurrence is a role negation operator. The 
role negation operator is not avail able in ACC or other current description logi cs that 
form the basis of OWL DL/1. 1/2.0 IIBaader et al. 20031 |QWT721H^|0WL 2 200911 . 

■ The three examples can be expressed in first-order logic as follows. 



V.T[spam-filter(a;) o . mechanism(x) A 3y[filter-out(x, y) A spam-email(y)]] 
(|) Vx[sound-spam-filter(a;) -o- . spam-filter(x) A Vy[filter-out(x, y) -> spam-email(y)]] 
(t) Vx[complete-spam-filter(a;) -o- . spam-filter(.x) A V2/[spam-email(2/) -> filter-out(a;,y)]]. 

The right-hand-sides of the equivalences (f) and {\) involve universal quantification 
but of a different kind. In (f) it is the image elements of the role filter-out that are 
universally quantified, while in {%) it is the elements in the concept spam-email that 
are universally quantified, (f) expresses the necessity of a property (what is filtered out 
is necessarily a spam message), while ($) expresses the sufficiency of a property (being 
a spam message is sufficient to be filtered out). Natural examples of both kinds of 
universal quantification can be found in many domains and are common in every-day 
language. 
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Motivated by pushing the limits of description logics, in this paper we are interested 
in description logics that allow role negation, and can therefore accommodate exam- 
ples such as the above, but also provide a range of other role operators not typically 
supported in mainstream description logics. In particular, we focus on a description 
logic, called ALBO' 6 . ACBO' 6 is the description logic ACC extended by union of roles, 
negation of roles, inverse of roles, and the identity role. In addition, it provides full 
support for ABox individuals and si ngleton concepts. ACBO' 6 is an extension of the de- 
scription logic ALB, introduced in MHustadt and Schmidt 20001 , with individuals and 
singleton concepts, called nominals in modal logic, and the identity role. ALB is the 
extension of ALC, in which concepts and roles form Boolean algebras, and additional 
operators include inverse of roles and a domain restriction operator. It is shown in this 
paper (Section [2]) that the domain restriction operator can be linearly encoded using 
the other operators of ALB. 

AC BO' 6 is a very express i ve description log ic. It subsumes Boolean modal 
logic | |Gargov and Pas sy 1990; Gargov et al. 1987 1 and tense, hybrid versions of 
Boolean modal logic with the @ operator and nominals. It can also be shown that 
ACBO' 6 is expressively equivalent to the two-variable fragment of first-order logic with 
equality. ACBO' 6 is in fact very close to the brink of undecidability, because it is known 
that adding role composition to ACB takes us into undecidabl e territory. 

Since ACBO' 6 subsumes Boolean modal logic it follows from |Lutz and Sattler [2002 1 
that the satisfiability problem in ACBO' 6 is NExpTime-hard. IGradel et al. [1997 1 
showed that satisfiability in the two-variable first-order fragment with equality is 
NExpTime-complete. It follows therefore that the computational complexity of ACBO' 6 - 
satisfiability is NExpTime-complete. 

Description logics with full role negation can be decided by transla- 
tion to fi rst-order logic and first-orde r resolution theorem prov ers such as 
MSPASS MHustadt et al. 1999M. SPASS llWeidenbach et al. 20071. E ISchulz 20021 
and Vampire HRiazanov and Voronkov 19991 . The paper MHustadt and Schmidt 20001 
shows that the logic ALB can be decide d by translation to first- order logic and ordered 
resolution. This result is extended by |De Nivelle et al. [2000Q to ACB with positive 
occurrences of composition of roles. ACBO' 6 can be embedded into the two-variable 
fragment of first-or der logic with equality which can b e decided with first-order 
resolution methods IIDe Nivelle and Pratt-Hartmann 20011 This means that ACBO' 6 
can be decided using first-order resolution methods. 

None of the current tableau-based description logic systems are able to handle 
ACBO' 6 or ACB because they do not support full role negation. In fact, few tableau cal- 
culi or tableau procedures have been described for description logics with complex role 
operators, or equivalent dynamic modal logic versions. Ground semantic tabl eau cal- 
culi and tableau decision procedures are presented by |De Nivelle et al. [2000] for the 
modal versions of ALC (U, that is, ACC with role union, role intersection and role 

in verse. These are extended with the domain restriction operator to ALC (Li, n, _1 , \) 
by lSchmidt [2006a) . A semantic tableau decision procedure for ALC with role intersec - 
tion, role inverse, role identity and role composition is described by |Massacci [200l] |. 
None of these tableaux make provision for the role negation operator however. 

A tableau decision procedure for the description logic ACCQZb which allows 
for Boolean com binations of 'safe' occurrences of negated roles is discussed 
by ITobies [2001| . From the clausal form of the first-order translation it can be 
seen that safeness ensures guardedness which is violated by unsafe occurrences of 
role negation. Guardedness is also important in the definition of a generalisation 
wi th relational properties of the dynamic modal logic corresponding to ALC(U, n, _1 ) 
in |De Nivelle et al. [20001 , where it is shown that hyperresolution and splitting de- 
cides this logic. The hyperresolution decision procedure for this logic is essentially a 
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hypertableau approach with similarities to |Motik et al. [2009) . Decidability of proposi- 
tio nal dynamic logic with ne g ation of atomic relati ons using Biichi automata is shown 
by |Lutz and Walther [20041 . ISchmidt et al. [2004Q presented a sound and complete 
ground semantic tableau calculus for Peirce logic, which is equivalent to the extension 
of ACB with role composition and role identity However the tableau is not terminating 
because reasoning in Peirce logic is not decidable. 

In this paper we present a ground semantic tableau approach that decides the de- 
scription logic ACBO l(i . In order to limit the number of individuals in the tableau 
derivation and guarantee termination we need a mechanism for finding finite models. 
Standard loop checking mechanisms are based on comparing sets of (labelled or un- 
labeled) concept expressions such as subset blocking or equality blocking in order to 
detect periodicity in the underlying models. Instead of using the standard loop check- 
ing mechanisms, our approach is based on a new inference rule, called the unrestricted 
blocking rule, and equality reasoning. Our approach has the following advantages over 
standard loop checking. 

— It is conceptually simple and easy to implement. It does not require specialised 
blocking tests and procedural descriptions in terms of status variables. All individuals 
are blockable and once blocked remain blocked. 

— The blocking mechanism is generally sound and complete. This 
mea ns that it is applicable also to other deduction methods and other log- 



ics | Schmidt and Tishkovsky 2008 1 including full first-order logic, where it can 
be used to find finite models. 

— It provides greater flexibility in constructing models. For instance, it can be used 
to construct small models for a satisfiable concept, including domain minimal models. 

— The approach has the advantage that it constructs real models, whereas exist- 
ing tableau procedures for many OWL description logics construct only pseudo-models 
that are not always real models but can be completed by post-processing to real models 
(which may be infinite). 

— It can be implemented a nd simulated in first-order logic 
pro vers |Baumgartner and Schmidt 2008 1. 



The style of presentation of o ur tableau calculus is similar to presentations in modal 
and hybrid log i c, for example [Fitting 1972] IBlackburn 20001 IDe Nivelle et al. 20001 



ISchmidt 2006at ISchmidt et aL_2004J |del Cerro and Gasquet 200211. Notable about our 



calculus compared, for example, with HSchmidt 2006at ISchmidt et al. 200411 is that it 
operates only on ground labelled concept expressions. This makes it easier in princi- 
ple to implement the calculus as extensions of tableau-based description logic systems 
that can handle singleton concepts and include equality reasoning. 

The structure of the paper is as follows. The syntax and semantics of ACBO' 6 are 
defined in Section |2l In Section [3] we prove that ACBO l(i has the effective finite model 
property by reducing ACBO' 6 -satisfiability to the two-variable fragment of the first- 
order logic. We define a tableau calculus for ACBO' 6 in Section HI and in Section [5] 
we prove that it is sound and complete without the unrestricted blocking rule. Sec- 
tions [6] and [7] introduce our blocking mechanism and prove soundness, completeness 
and termination of the tableau calculus extended with this mechanism. In Section [8] 
we prove that an appropriate strategy for the application of the unrestricted blocking 
rule yields a tableau procedure with optimal complexity. We define general criteria for 
deterministic decision procedures for ACBO' 6 (and any sublogics) in Section[9l Various 
issues concerning blocking and our results are discussed in Section [TTJ1 

The paper is an extended and im proved version of the confer- 
ence paper [Schmidt and Tishkovsky 2007 ] and builds on results in 



Schmidt and Tishkovsky |2008| |. 
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2. SYNTAX AND SEMANTICS OF ACBO'" 

The syntax of ACBO"* is denned over a signature, denoted by £ = (O, C, f?), consisting 
of three disjoint alphabets: O, the alphabet of individuals or object names, C, the al- 
phabet of concept symbols, and R, the alphabet of role symbols. For individuals we use 
the notation a, a', a", a t , for concept symbols A, A', A it and for role symbols Q, Q', Q", Qi. 
The language includes a special role symbol id for the identity role which is regarded 
as a constant. The logical connectives are: -> (negation), U (union for both concepts and 
roles), 3 (existential concept restriction), and _1 (role inverse). Concept expressions (or 
concepts) C, D and ro/e expressions (or ro/es) i?, 5 are defined by the following grammar 
rules: 

C,D = A | {a} | -,C | CUD 3i?.C, 

= Q | i?US | iT 1 | -.i? | id. 

We refer to {a} as a singleton concept. By the length of an AC60 ld -expression we 
understand the length in symbols of a word which represents E in the above language. 

A TBox is a finite set of concept inclusion statements of the form CCD and an RBox 
is a finite set of role inclusion statements of the form RQ S. An ABox is a finite set of 
statements of the form a : C and (a, a') : R, which are called concept assertion and role 
assertions, respectively. A knowledge base is a tuple (T, 1Z, A) consisting of a TBox T, 
an RBox 7Z, and an ABox A. 

Next, we define the semantics of ACBO"*. A model (or an interpretation) X of ACBO"* 
is a tuple 

I=(A I ,A I ,...,a I ,...,Q 1 ,...), 

where A 1 is a non-empty set, and for any concept symbol A, any role symbol Q and 
any individual a: 

A x is a subset of A 1 , a 1 £ A 1 and Q 1 is a binary relation over A 1 . 

We expand the interpretation 2 to all concepts and roles with the use of the following 
definitions (for any concepts C, D, roles R, S, and individuals a): 



{a} 1 ^ {a 1 }, 
(-.C) 1 = A I \C I , 
(CUD) 1 = C X UD T , 
(3R.C) 1 * {x\3yeC T (x,y) e R 1 }, 



(RUSf = R X US T , 
(R- 1 ) 1 d = f (R 1 )- 1 = {(x,y)\(y,x)ER x }, 
{^R) x = (A 1 x A 1 ) \ R x , 
id 1 = {(x,x) | x £ A 1 }. 



A concept C is satisfied in a model X iff C 1 7^ 0. A set of concepts is satisfied in a 
model 1 iff all the concepts in the set are satisfied in X. A concept is satisfiable iff there 
is a model where it is satisfied. 

Slightly departing from description logic conventions, we say a concept C is valid in 
a model I iff C 1 = A 1 . A set of concepts is valid in a model I iff all the concepts in 
the set are valid in X, If E is a concept expression, a concept inclusion statement, a 
role inclusion statement, a concept assertion or a role assertion, we indicate by 1 1= E 
that i? is valid in the model iQ In particular, shortening the definition of concept 
validity, we can write that, in any model 1 and for any concept C, 

IhC C x = A X . 



1 In the literature X \= E is normally only denned when E is an inclusion, equivalence or assertion, and then 
it is said that E is true in I. 
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Concept and role inclusion statements are interpreted as subset relationships, and 
concept and role assertions are interpreted as element-of relationships. In particular, 
in any model X and for any concepts C, D, any roles R, S, and any individuals a, a': 

X |= C C D <=* C x C D x , X\= a:C <^ a x eC x , 

X^R^S<^R I CS I , <^ (a X , a' 1 ) e R x . 

A concept C is satisfiable with respect to a knowledge base (T, 1Z, A) iff C is satisfied 
in a model I validating all the statements from the knowledge base, that is, X |= E for 
every E e T U K U A 

ACBO' ti has considerable expressive power and many useful additional operators 
can be defined in it. These include the following standard operators: 



Top concept: 


T 


clef 


A U ^A (for some concept symbol A) 


Bottom concept: 


_L 


clef 




Concept intersection: 


CnD 


clef 


-.(-iCU-rD) 


Universal restriction: 


VR.C 


clef 


-BR.^C 


Image operator: 


B^R.C 


clef 


3R-\C 



plus these operators, which can be defined using role negation: 

Top/universal role: V = Q U -<Q (for some role symbol Q) 

Bottom/empty role: A = ->v 

Role intersection: RnS = -n(-.ii U -.5) 

Diversity role: div = — iid 

Universal modality: DC = VV.C 

Sufficiency operator: Vi?.C = ->3-iR.C 

The bottom role can be expressed by using a concept inclusion stating that the domain 
of the role is empty. The sufficien cy operator is also known as the window operator, see 
for example (Gargov et al. 1987) . 

Concept assertions can be internalised as concept expressions as follows: 

Concept assertions: a : C = 3v.({a}nC). 

A role assertion (a, a') : R can be expressed as a concept assertion, namely 

Role assertions: (a, a') : R = a : 3R.{a'}, 

or, using the above, it can be internalised as a concept expression. In addition, concept 
and role inclusion axioms can be internalised as concept expressions. 

Concept inclusion: CCD = □(-,(? U D) 

Role inclusion: R C S = UM^R U S).± 

Concept assertions, role assertions, concept inclusions and role inclusions in ACBO' 6 
are therefore all representable as concept expressions. This means that in ACBG"* the 
distinction between TBoxes, ABoxes and RBoxes is strictly no longer necessary, and 
concept satisfiability in ACBO' d with respect to any knowledge base can be reduced to 
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concept satisfiability with respect to a knowledge base where the TBox, the RBox, and 
the ABox are all empty. More precisely, we have that a concept C is satisfiable with 
respect to a knowledge base (T, 1Z, A) iff the conjunction 

Cn\~\(TUTluA) 

of the concept C and all the concept expressions from the set T U 1Z U A is satisfiable. 
Similarly, a set S of concepts is satisfiable with respect to a knowledge base (T, TZ, A) 
iff the set SUTUIZUA is satisfiable. Without loss of generality, in this paper, we 
therefore focus on the problem of concept satisfiability in ACBO' 6 . 

Boolean combinations of inclusion and assertion statements of concepts and roles 
are expressible in ACBO' d , as the corresponding Boolean combinations of the concept 
expressions which represent these statements. In fact, we are allowed to use such 
statements in concept and role expressions within the language of ACBO"* provided 
that a well-formed ACBO"* expression is obtained after replacing all these statements 
in the original expression for well-formed ACBO" 3 expressions which define them. For 
example, the following expression is a well-formed concept expression in ACBO" 1 : 

((Alice :-aiikes.football_fan) n (Bob:football_fan) n (hasFriend c likes)) 
c ((Alice, Bob) :-ihasFriend). 

It says that Alice and Bob cannot be friends because Bob is fanatical about football 
and Alice does not like football fans. The sentence uses an assumption expressed as a 
role inclusion that somebody's friend is necessarily a person who he or she likes. Notice 
that the role inclusion statement denotes an ACBO"* expression which essentially uses 
the role negation operator. 

The encodings of the operators mentioned above preserve logical equivalence. Addi- 
tionally, ACBO"* also has enough expressive power to represent concept satisfiability 
problems which involve the operators defined below: 



Test operator: 


(C?f 


def 


{{x,x) e A 1 


x A 1 | x e C 1 }, 


Domain restriction: 


(R\C) X 


def 


{{x,y) e R 


x e C 1 }, 


Range restriction: 


(R\Cf 


def 


{(x,y)€R\ 


y g C 1 }, 


Left cylindrification: 


(D c f 


def 


{(x,y)eA x 


x A 1 | x e D 1 }, 


Right cylindrification: 


( c Df 


def 


{(x,y)eA x 


x A 1 y e D 1 }, 


Cross product: 


(C x D) x 


def 


C 1 x D 1 = 


{(x,y)\xeC x ,yeD 1 } 



The test operator can be represented using the range restriction operator and the iden- 
tity role: (C?) 1 = (idj C) x . In the presence of role inverse, the universal role and role 
intersection any single operator from { f, J , c , c , x } is enough to define the remaining 
operators from this set. In any model I, the following equalities are true: 



(R\C) X = 


{(R-'IC)- 1 ) 1 


(R\C) X = 


((R^IC)- 1 ) 1 


(D c f = 




( c Df = 




(D c f = 


{V\D) X 


( c Df = 


(V\D) X 


(R\D) X = 


(RUD C ) X 


(R\D) X = 


(R n C D) X 


(D°) x = 


(D x T) x 


( C D) X = 


(T x D) x 


(C x D) x = 


(C c n C D) X 
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Now it is enough to show that one of these operators can be encoded in ACBO' d . For 
example, expressions involving left cylindrification can be linearly encoded in ACBO l(i 
by replacing all occurrences of D c in C by a new role symbol Q r> uniquely associated 
with D and adding the definitions -*D C MQ D .L and D C -G-iQ^.T to the knowledge 
base. This encoding preserves satisfiability equivalence. In a similar way, the other 
operators from { \, J , - c , c -, x} can be linearly encoded in ACBO' d . 

Often description logics are required to satisfy the unique name assumption. We do 
not assume it for ACBO' ti . However, the unique name assumption can be enforced by 
adding disjointness statements of the form {a} n {a'} C _L, for every distinct pair of 
individuals that occur in the given knowledge base, to the TBox. 

In this paper we do not use role assertions in the form (a, a') : R but use them in the 
form a : 3R.{a'}. We refer to a : 3R.{a'} as a link (between the individuals a and a'). 

Later we refer to the description logics ACCO and ACCO a . ACCO is a sublogic of 
ACBO' d without all the role operators and the identity role. ACCO D extends ACCO 
with the universal modality operator □. 

3. EFFECTIVE FINITE MODEL PROPERTY 

In this section we show that ACBO^ has the effective finite m odel property. In or- 
der to make use of the well-known result of |Gradel et al. [1997 ] that the two-variable 
fragment of the first-order logic with equality has the finite model property, we en- 
code ACBO l(i -satisfiability of concepts in the two-variable fragment of the first-order 
logic with equality. Additionally, we define a mapping of models for the two-variable 
fragment back to ACBO"* -models and prove that it preserves satisfiability modulo the 
mentioned encoding. 

For every concept symbol A, role symbol Q, and individual a, let A be a unary pred- 
icate symbol, Q a binary predicate symbol, and a a constant which are uniquely as- 
sociated with A, Q, and a, respectively. The following defines a mapping ST as the 
standard translation of ACBO' d parametrised by the variables x and y. The standard 
translation of concepts is: 

ST X (A) * A(x) SJ x ({a}) ^ xna 

ST,K7) = -.ST* (C) SJ X (CUD) d = f SJ x (C)vSJ x (D) 

ST X (3R.C) = 3y(ST xy (R)/\ST y (C)) 

The standard translation of roles is: 

ST ' xy (Q) = Q(x,y) 

ST xy (R, 1 ) = ST yx {R) 

ST^i?) U ST^R) 

Clearly, only two variables occur in ST T (C) for every concept C. Given a concept C, the 
translation ST X (C) of C can be computed in linear time with respect to the length of C. 

As the standard translation just follows the definition of the semantics of ACBO l(i , 
every AC£>0 ld -model X can be viewed as a first-order model over the signature S = 
({a | a £ 0},{A A e C},{Q \ Q e R}), where the interpretations of the symbols 
A, Q, and a are A 1 , Q x , and a 1 respectively. Similarly, every first-order model over a 
signature S can be seen as an AC£>0 ld -model. 

We write 1 \= <t>[x\ \-¥ a\, . . . ,x n >->• a„] to indicate that all free variables of a first- 
order formula are contained in the set {x\, . . . ,x n } and <f> is true in X where the 
variables x\,...,x n are assigned the domain elements <n, . . . , a n , respectively. 



ST Ky (id) = x ps y 
ST xy {RUS) = ST xy {R)wST xy (S) 
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The following theorem can be proved by simultaneous induction on the lengths of 
concepts and roles. 

THEOREM 3.1. Let I be any ACBO i6 -model. Then, for any concept C, any role R 
and any a,b S A 1 , 

— aeC x iffl (= ST x (C)[x H- a], and 

— (a,b) e R x iffl h ST xy (R)[x ^ a ,y ^ b}. 

The effective finite model property for description logics can be stated as follows. 
A description logic L has the effective finite model property iff there is a computable 
function : N — >• N, such that the following holds. 

For every concept C, if C is satisfiable in an i-model then there is a finite i-model 
for C with the number of elements in the domain not exceeding p,(ri), where n is the 
length of C. 

We call fx the (model) bounding function for L. 

The notion of the effective finite model property for fragments of the first-order logic 
can be obtained from the above definition replacing the phrases 'logic V and 'concept C 
with 'fragment J 7 ' and 'formula 4>, respectively. 

The effective finite model property is sometimes called the bounded model property 
or the small model property and is stronger than the finite model property. A logic has 
the finite model property if any satisfiable concept (formula) has a finite model. With 
the effective finite model property there is a bound on the size of the model that is 
given a priori based on the given concept (or formula). This means there is a naive 
procedure for deciding satisfiability, which is based on successively computing larger 
and larger models within the bound and model checking the given concept with respect 
to the obtained models. 

The effective finite model p roperty for the tw o-variable fragment of the first-order 
logic with equalit y is proved by |Mortimer [1975[ . An exponential model bounding func- 
tion fj, is given by JGradel et al. [1997| . Because we will use this function in Sections [7] 
and 111 we define it explicitly: 

A*(n) = 3(n[log(n + l)J)-2 n . 

THEOREM 3.2 ( [GRADEL ET AL. [19971 ]). The two variable fragment of the first or- 
der logic with equality has the effective finite model property with the model bounding 
function /z(n). 

Theorems l3.1| and l3.2| imply that ACBO' d has the effective finite model property: 

Theorem 3.3 (Effective Finite Model Property of ACBO' d ). ACBO' d has 
the effective finite model property with the model bounding function n{n). 

This provides an upper bound for the worst-case complexity of testing con- 
ce pt satisfiability for A CBO"*. The complexity result for Boolean modal logic 
of |Lutz and Sattler [2002| gives the needed lower bound for concluding: 

THEOREM 3.4. The concept satisfiability problem for ACBO 6 is NExpTime- 
complete. 

4. TABLEAU CALCULUS 

Let T denote a tableau calculus comprising of a set of inference rules. A derivation 
or tableau for T is a finitely branching, ordered tree whose nodes are sets of labelled 
concept expressions. Assuming that S is the input set of concept expressions to be 
tested for satisfiability, the root node of the tableau is the set {a : C \ C e S}, where 
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a denotes a fresh individual. Successor nodes are constructed in accordance with a set 
of inference rules in the calculus. The inference rules have the general form 

Xi | ... | X n ' 

where X is the set of premises and the X t are the sets of conclusions. If n = 0, the rule 
is called closure rule and written X /±. An inference rule is applicable to a selected 
labelled concept expression E in a node of the tableau, if E together with possibly other 
labelled concept expressions in the node, are simultaneous instantiations of all the 
premises of the rule. Then n successor nodes are created which contain the formulae 
of the current node and the appropriate instances of X±, . . . , X n . We assume that any 
rule is applied at most once to the same set of premises, which is a standard assumption 
for tableau derivations. 

We use the notation T(S) for a fully expanded tableau built by applying the rules of 
the calculus T starting with the set S as input. That is, we assume that all branches in 
the tableau are fully expanded and all applicable rules have been applied in T(S). For 
any concepts C\, . . . , C„, the notation T(C±, . . . , C n ) is used instead of T({C±, . . . , C n }). 

In a tableau, a maximal path from the root node is called a branch. For B a branch 
of a tableau we write D e B to indicate that the concept D has been derived in B, 
that is, D belongs to a node of the branch B. The notion of a tableau branch we use 
in this paper can be viewed in two ways. On one hand it has a procedural flavour as 
a path of nodes in the tableau. On the other hand a branch can be identified with 
the set-theoretical union of the nodes in it. A more careful distinction between these 
perspectives leads to the classical notion of a Hintikka set but this is not essential for 
the paper. 

A branch of a tableau is closed if a closure rule has been applied in this branch, 
otherwise the branch is called open. Clearly, expansion of any closed branch can be 
stopped immediately after the first application of a closure rule in the branch. The 
tableau T{S) is closed if all its branches are closed and T{S) is open otherwise. The 
calculus T is sound iff for any (possibly infinite) set of concepts S, each T(S) is open 
whenever S is satisfiable. T is complete iff for any (possibly infinite) unsatisfiable set 
of concepts S there is a tableau T(S) which is closed. T is said to be terminating (for 
satisfiability) iff for every finite set of concepts S every closed tableau T{S) is finite and 
every open tableau T(S) has a finite open branch. 
Let T4£Bo id be the tableau calculus consisting of the rules listed in Figure [H 
The first group of rules are the rules for decomposing concept expressions. They are 
in fact the rules for testing satisfiability of concepts for the description logic ACCO, 
that is, ACC with individuals. The ([T]l rule is the closure rule. The ( H=jj > rule removes 
occurrences of double negation on concepts. (The rule is superfluous if double negations 
are eliminated using on-the-fly rewrite rules, but is included to simplify the complete- 
ness proof somewhat.) The 0) and ( FOP rules are standard rules for handling concept 
disjunctions. As usual, and in accordance with the semantics of the existential re- 
striction operator, for any existentially restricted concept the 0) rule creates a new 
individual with this concept and adds a link to the new individual. It is the only rule 
in the calculus that generates new individuals. An additional side-condition is that 
the new individual a' is uniquely associated with the premise a : 3R.C. As usual we 
assume that the (Q rule is applied only to expressions of the form a : 3R.C, when C 
is not a singleton, that is, C =^ {a"} for any individual a". This condition prevents the 
application of the (Q rule to expressions of the form a : 3R.{a"} because this would 
just cause anot her w itness of an i?-successor of a to be created when a" is already such 
a witness. The ( HEW rule is equivalent to th e sta ndard rule for universally restricted 
concept expressions. The ( jsym| t, l imonj i, and flrefll l rules are the equality rules for indi- 
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Rules for ACCO: 



a : C, a: ->C . a ' ->-iC 

_L a : C 

, , a:n(CUfl) , . a: (CUD) 

(^ u ) : 77 77 (u): 



a : -*C, a : -iD a : C | a : D 

a : 3R.C , . . . , _,. a : -3R.C, a : 3R.{a'} 

( 3 ) : nn r n r~F ( ° 1S neW) ^ / n 

(sym): L { (-sym): - — 

a : {a'}, a' : C a : C 

(mon): (refl): 



a : C a : {a} 

Rules for complex roles: 

a:3(flU5).{a'} a:^(i?Ug).C 

V a : 3i?.{a'} | a : 3S*.{a'} ^ ''a: -3R.C, a : ->3S.C 

x a : BR' 1 . {a'} t a : -diT^C, a' : 3i?.{a} 

( ): a':3i?.{a} ( " )! 

a : 3^R.{a'} a : -.3-..R.C, a' : {a'} 

( a : ->3R.{a'} ( " ^' a : 3R.{a'} \ a' : -.C 

a : Bid. {a'} a : -Gid.C 
3'd : (-.Bid): — 

Fig. 1 . Tableau calculus T ACBO 'd for ACBO i(S . 

viduals, familiar from hybrid logic tableau sy stem s. They can be viewed as versions 
of standard rules for first-order equality. The drefll ) rule is formulated a bit unusually, 
because it adds a validity a : {a} to the branch. In our presentation expressions of the 
form a : {a} are used to represent the individuals occurring on a branch, which is ex- 
ploited by the fl-iEHD rule. See also remarks in Section[lOl The i j-symj > rule is needed to 
ensure that any negated singleton concept eventually appears as a label in a concept 
assertion. 

The rules in the second group are the rules for decomposing complex role expres- 
sions. They can be divided into two subgroups: rules for positive existential role occur- 
rences and rules for negated existential role occurrences. These are listed in the left 
and right columns, respectively. Due to the presence of the Q rule, the rules for posi- 
tive existential roles are restricted to role assertions, that is, the concept expressions 
immediately below the 3 operator are singleton conc epts. 

Among th e rules for negated existential roles, the rule and the fl-iEHU rule are 

special. The d-d~ x t rule allows the b ackwa rd propagation of concept expressions along 
inverted links (ancestor links). The fl-iEHI t rule is the rule for the sufficiency operator. 
It expands a universally restricted concept in which the role is negated according to 
the semantics: 

x e {^R.Cf ^ \/y ((x, y)eR x \/ye (-C) 1 ) . 

That is, a' in the rule is implicitly quantified by a universal quantifier. The effect of the 
second premise, a' : {a 1 }, is to instantiate a' with individuals that occur in the branch. 
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Satisfiable (no more rules are applicable) 



Fig. 2. A derivation in T^ceo"* 



The remaining rules in this subgroup are based on obvious logical equivalences in 
ACBO id . 

Tableau rules that do not produce new individuals are called type-completing rules. 
In the case of the calculus T^cbo' 6 , with the exception of the Ql rule, all rules are 
type-completing. 

Now, given an input set of concepts S, a tableau derivation is constructed as follows. 
First, preprocessing is performed. This pushes occurrences of the role inverse operator 
in every concept in S inward toward atomic concepts by exhaustively applying the 
following role equivalences from left to right: 

(R U S)^ 1 = RT 1 U (^R)- 1 =^(R- 1 ), 

(R- 1 )~ 1 = R, id 1 = id. 

This preprocessing is required to allow the tableau algorithm to handle the role inverse 
operator correctly. Pushing inverse inwards is the only preprocessing required and can 
be done in linear time. Transformation to negation normal form is optional but for 
practical purposes not a good choice because obvious properties of expressions and 
their negation require unnecessary inference steps to reveal. 

Suppose S' is the set of concepts resulting from preprocessing. Then we build a com- 
plete tableau Tacbo^(S') as described above. 

In the rest of the paper when we refer to the calculus Tacbo' 6 we assume that the 
described preprocessing with respect to role inverse has been applied to the input con- 
cept (set) before the rules of the calculus are applied. It is also important to note that 
a : C and all labelled expressions and assertions really denote concept expressions. 

An example of a finite derivation in T^cso"* is shown in Figure [2] for the concept 

-.(-.3(QU-.Q).i4u3Q.A). 

In the figure each line in the derivation is numbered on the left. The rule applied and 
the number of the premise(s) to which it was applied to produce the labelled concept 
expression (assertion) in each line is specified on the right. The black triangles denote 
branching points in the derivation. A branch expansion after a branching point is in- 
dicated by appropriate indentation. The derivation presents a finished tableau with 
two branches; the left branch is closed and the right branch is open. Hence, because 
the tableau calculus is complete, which is shown in the next section, the input concept 
- (-d(Q U U 3Q.A) is satisfiable. 
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5. SOUNDNESS AND COMPLETENESS 

We turn to proving soundness and completeness of the calculus. It is easy to see that 
every rule preserves the satisfiability of concept assertions. More precisely, given an 
ACBC> id -model, for any rule X Q /X 1 \ ■■■ \ X m of the calculus T AC bo' 6 if the set X a cr 
of instantiations of premises of the rule under a substitution a are all satisfiable in 
the model then one of the sets X\a, . . . , X m a is also satisfiable in the model. Any rule 
with this property is said to be sound. Since all the rules of the calculus are sound this 
implies the calculus T^cbo' 6 is sound. 

Theorem 5.1 (Soundness). T acbo ^ is a sound tableau calculus for satisfiability 
in ACBO i(i . 

For proving completeness, suppose that a tableau T AC bo' 6 (S) for a given set of con- 
cepts S is open, that is, it contains an open branch B. From B we construct a model 1(B) 
for the satisfiability of S as follows. By definition, let 

/ def f / ~i v> 

The rules i jsym| >, l imonl i. and drefll ) ensure that ~b is an equivalence relation on individ- 
uals. Define the equivalence class ||a|| of an individual a by: 

||a|| = {a' | a~ B a'}. 

We set A x ( 6 )={||a|| | a : {a} € B}, and for every Q e R, A e C and a e O we define 

(IMUIa'H) GQ I(B) a : 3Q.{a"} G £ for some a" ~ B a', 

\\a\\ G A 1 ^ <^> a:AeB, 

a T(B) m (Ml if a : {a} £ B, 

\\\a'\\ for some ||a'|| G A x( - B \ otherwise. 

The rule i lmoni i ensures that the definitions of Q 1 ^ and A 1 ^ are correct and do not 
depend on the choice of the representative a of the equivalence class ||a||. Finally, we 
expand the interpretation ■ X ^ B > to all concepts and roles in the expected way using 
induction on their lengths. This completes the definition of the model 1(B) extracted 
from a branch B. 

Let -< be the ordering on expressions (concepts and roles) of ACBO i6 induced by the 
rules of Tj(cBo >d - That is, -< is the smallest transitive ordering on the set of all ACBO"* 
expressions satisfying: 

C <^C R<^R R<BT X 

C <CUD D -<CUD 

C ~< 3R.C R ~< 3R.C 

-.C -< -n3R.C R ~< -n3R.C 

R-<RUS S -<RUS 

Note that -< does not coincide with the direct subexpression ordering. -< is a well- 
founded ordering, since the length of the expression to the left in a clause is always 
strictly less than the length of the expression to the right. 

Lemma 5.2. 

(1) Ifa:DeB then \\a\\ e D I{ - B "> for any concept D. 
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(2) For every role R and every concept D 

^ a : 3R.{a'} G B implies (||o||, ||o'||) G R I{B \ 

Qfr) if(\\a\\, \\a'\\) G R X(B *> and a : ^3R.D G B then a 1 : ->D e B. 

PROOF. We prove both properties simultaneously by induction on the ordering 
The induction hypothesis is: for an arbitrary ACBO l(S expression E and each expres- 
sion F such that F ~< E, if F is a concept then property Q} holds with D = F. Otherwise 
(that is, if F is a role), property © holds with R = F (and D is arbitrary). 

To prove property (Q} we consider the following cases. 

D = A. We have a : A G B <^> ||a|| G A 1 ^ by definition of A X ^ B \ 

D = {a'}. If a : {a'} G B then, using the definition of a x< - B) , a x< - B) = \\a\\ = \\a'\\ = 

oFV*) and, consequently, a 1 ^ G {a' x ^} = {a'} x{B) - 

D = ^Dq. If a : -i£>o G B then a : Dq B because otherwise B would have been 

closed by the CO rule. We have the following subcases. 

D Q = A. We have a : A e B \\a\\ G A X W by definition of A X( - B K 

Dq = {a'}. As the rules iHsymj ) and flrefU have been applied in B it is clear that 
a' : {a 1 } is in B and a' x ^> — \\a'\\. Similarly, a 1 ^ = \\a\\. Furthermore, because 
a : {a'} £ B we have a/ga', that is a g \\a'\\ = a' x( - B K Consequently, ||a|| ^ 
{\\a>\\} = {a'} x{B) - 

D = If a : -i-iDi G B then a : D\ £ 6 by the ( j=^D rule. By the induc- 

tion hypothesis, the property Q} holds for Di -< -nDj. Thus, ||o|| G Dp 8 ^ = 
(-.-. D x ) x{ - B ') = D X &\ 

D = D\ U D 2 . In this case both a : -^D\ and a : -i£> 2 are in the branch B by 
the ( R3 rule. We also have -lDi -< -.(Di U D 2 ) and ->D 2 -< -'(-Di U D 2 ). Hence, 
by the induction hypothesis for the property <Q}, ||a|| G (-i£>i) I(6) n (-lD 2 ) z ( b) = 
(^(DxUDa)) 1 ^). 

L> = 3R.D X . Let ||a'|| be an arbitrary element of A I(8) such that (||o|[, ||a'||) G 
# Z ( B ) (if there is no such element then there is nothing to prove). By the in- 
duction hypothesis the property d2bl holds for R -< D . Thus, a' : ->D± G B. 
The induction hypothesis for the property (Q]) gives us ||a'|| £ D X(B \ Finally, we 
obtain ||a|| G {-BR.D\) X ^ B ' because a' was chosen arbitrarily. 

D = D Q U Di. If a : D Q U D x G B then either a : D Q G £, or a : £>! G B by the 01 rule. 

Hence, either \\a\\ G Dq ^ or ||a|| G D^ B ' by the induction hypothesis for D ~< D 

and Z?i -< Thus, ||a|| G D* (B) U Z>f (S) = D X W. 

D = 3R.D . If a : 3R.D G i3 then a' : D e B and a : 3i?.{a'} G £> for some individual 
a' by the 01 rule. By the induction hypothesis the properties Q} and d2al > hold for 

D -< D and R -< D respectively. Hence, ||a'|| 6 D X(B) and (||o||, ||o'||) G R X(B) . That 
is, || » || G (3R.D ) X W. 

To prove property © we consider all cases corresponding to the possible forms that a 
role R can have. 

R = Q. Sincea : 3Q.{a'} G B implies (||o||, ||a'||) G Q I(8) using the definition of Q I(B) , 
property (HHl holds trivially. For (HB let (|| a ||, ||a'||) G Q X(B) anda : -n3Q.D G 23. Using 
the definition of Q x{ - B \ there is an a" ~g a' such that a : 3Q.{a"} G Z?. Therefore, by 
the d -i El I t rule, a" : ->D is in the branch B, too. Finally, a' : ->D G B by the l imonli rule, 
i? = id. For property <|2a]> let a : 3id.{a'} G B. Then a : {a'} G B by the Odl rule 

and, hence, ||a|| = ||o'||. Consequently, (||a||, \\a'\\) G id I(B ). For (US! suppose that 
(||o||, ||o'||) G id I(6) and a : -^3\d.D G B. Hence, ||a|| = ||a'|| and, therefore, a : {a'} is 
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in B. Further, by the ( H3idl > rule, a : ->D e B. Finally, by the dmonD rule, a 1 : -<D is in 
the branch B. 

R = S-\ For property let a : 3S'- 1 .{a'} e B. Then a' : 3S.{a} G B by the 
rule (H3- By the induction hypothesis for S -< R we have (||a'||, ||a||) G S x{ - B \ Con- 
sequently, (]]a||, ||a'||) G (S- 1 ) 1 ^. For 42B suppose that (||o||, ||a']|) G (S*- 1 ) 1 ^ and 
a : -^BS^ 1 ^ e B. As all the occurrences of the inverse operator have been pushed 
through other role connectives and double occurrences of _1 have been removecQ we 
can assume that S = Q for some role name Q. Hence, (||a'||, ||a||) G Q 1 ^ and, by the 
definition of Q 1 ^, there is a" ~g a such that a' : 3Q.{a"} G B. By the l imonl i rule, 
a" : ->3Q~ l .D G B. Finally, by the H '1 rule, a' : ->D is in the branch B. 
R = S Q U S x . For (|2all suppose a : 3(S U Si). {a'} G B. Hence, a : 3S -{a'} e B or 
a : 3Si.{a'} G B by the Qu) rule. Thus, by the induction hypothesis for S -< i? 

and Si -< i? we have either (||a||, ||a'||) G 5^ (B) or (]|a||, ||o'||) G S^ {B) . Finally, by 
the semantics of the relational U connective we obtain (||o||, ||a'||) G (5 U S , i) I(e) . 

For (20 let (|M|, llo'H) G (S* U Si) 1 ^' = 5^ (B) U 5f (6) and a : ^3(5 U Si).D E B. By 
the ( I-GUD rule we obtain that both a : ->3S -D and a : ->3Sx.D are in B. Therefore, by 
the induction hypothesis for So -< R and Si -< R the property d2bl > holds and, thus, 
we have a' : ->D G B. 

R = -i5. For ( f2a1 > suppose a : EHS.{a'} G B. Then a : ->3S.{a'} G B is obtained with 
the rule. If (||o||, ||o'||) ^ (-S) 1 ^) then (||a|[, ||a'||) G S 1 ^' and by property (Hp 
which holds by the induction hypothesis for S ~< R we have that a' : ->{a'} is in 
B. This concept together with a' : {a'} implies the branch is closed. We reach a 
contradiction, so (||o||, ||o'||) G (^S) X ^ B \ 

For property ( f2bb suppose that (||aj|, ||o'||) G (^S) x( - B ^ and a : -3-iS.D are in the 
branch B. Then we have (||a||, ||a'||) ^ S 1 ^ and, hence, by the contrapositive of 
property ( f2a] > for S -< R, a : 3S.{a'} is not in B. Applying the ( E33 > rule to a : -iB^S 1 .!? 
we get a' : ->D G B. 

□ 

A direct consequence of this lemma is a stronger form of completeness of the tableau 
calculus which states existence of a model for an open branch. From this it follows that 
if the input set is unsatisfiable a closed tableau can be constructed for it. 

Theorem 5.3 (Completeness). For any set of concepts S and any tableau 
Tacbo' 6 (S), if there is an open branch in T^cbo' 6 (<S) then S is satisfiable in an ACBO' 6 - 
model. This implies Tacbo^ is a complete tableau calculus for testing satisfiability of 
concept expressions in ACBO"*. 

Thus, the calculus Tacbo' 6 is sound and complete for reasoning in ACBO' 6 . 
6. UNRESTRICTED BLOCKING 

There are satisfiable concepts which can result in an infinite Tacbo' 6 -tableau, where 
all open branches are infinite. The concept 

->3(Q' U -^Q').^3Q.A 

is such an example. Since the prefix -3{Q' U ~^Q').^ is equivalent to the universal 
modality, the concept a : 3Q.A is propagated to every individual a in every branch 
of the tableau. The concept a : 3Q.A itself, each time triggers the creation of a new 



2 Removing double occurrences of the inverse operator in front of atoms is not essential for the proof but it 
simplifies matters a bit. 
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1. dr. : 03Q.A give n 

2. a : {a } dreflblll 
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{ai} dreflbiil 

a.i OLTH 

8. a 7^ ai Loop checking: yl G £(ai) \ £(a ) 

9. a 2 : ,1 QH 

10. a, : 3Q.{a 2 } Q[7] 

11. a 2 : 



3. a 

4. ai 

5. a 

6. ai 

7. ai 



12. a 2 : 3Q.A (tnD fTTTTI 

13. ai ~ a 2 Loop checking: £(ai) D £(a 2 ) 

Fig. 3. Standard loop checking mechanism in ACCO n . 

individual with the 0) rule. Thus, any branch of the tableau contains infinitely many 
individuals. The branches have however a regular structure that can be detected with 
loop detection or blocking mechanisms. 

Let us demonstra te how standard loop checking (in this case, subset ancestor block- 
ing, see for example |Baader et al. [2003] ) detects a loop. As we already observed, satis- 



fiability of the concept -B{Q' U -^Q').^3Q.A corresponds to satisfiability of the concept 
D3Q.A in the description logic ACCO a , which is ACCO with the universal modality □. 
As a calculus for ACCO D we use the first group of rules from Figure[l]plus the following 
two rules (where a' in the left rule is uniquely associated with a : -idC). 

, . a : , . . x , N a : DC, a' : {a'\ 
-□):- — (a is new) □ : w 

a' : -iG a' : G 

Similar to the proofs in Section [5] it can be proved that this calculus is sound and 
complete for satisfiability problem in ACCO n . 

Figure [3] gives a derivation in this calculus using loop checking based on standard 
subset ancestor blocking. For any individual a, let C(a) be a set of concepts associated 
with a in the current branch. More precisely, it is defined by 

C(a) = {C | a : C is in the current branch, and C ^ {a}}. 

After all the type-completing rules have been applied to all concept expressions la- 
belled with a specific individual, loop checking tests are performed relative to an an- 
cestor individual. Two loop checking tests are performed, namely in step H] and step [13] 
Consider stepHU All the type-completing rules have been applied to all concept expres- 
sions of the form a 2 : C and a\ : C. Comparison of the sets of concepts C(ai) and £(a 2 ) 
associated with a\ and a 2 in the loop checking test shows that C(ai) subsumes £(a 2 ). 
Thus they are in a subset relationship as indicated, and consequently the individuals 
ai and a 2 can be identified. At step[H]the sets C(a ) and C{ai) are not in a subset rela- 
tionship because a : A is not present in the branch. The derivation therefore cannot 
yet stop, but does in step [13] 

This example illustrates one of the simplest forms of standard loop checking used 
in description and modal logic tableau procedures. Other forms of loop-checking have 
been devised for different logics. One can classify the different existing loop-checking 
mechanisms as using a combination of these blocking techniques: subset or equality 
blocking, non-pairwise or pairwise blo cking, ancestor or anywhe re blocking, and static 
or dynamic blocking, see for example [Baader a nd Sattler 2001) . These techniques are 
all based on comparing sets of concepts labelled by some individuals (and in the case of 
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pairwise blocking also sets of roles associated to predecessors). It is not clear whether 
these forms of loop checking are sufficient to handle role negation though. 

Suppose that, at some node of a branch, all the type-completing rules have been 
applied to concepts labelled with individuals a and a± . Following the standard non- 
pairwise blocking procedure we can identify a and a\ if they both label the same set 
of concepts. However, it is not correct to start identifying the individuals at this point 
in the derivation as there could be, for example, a concept 3S.->3-iR.C involving role 
negation, where R and C are expressions that are suitably complex. At a subsequent 
point the rule is applied to this concept and, hence, the expression a 2 : S^ R.C, 
where a 2 is new, appears in the branch. This triggers the application of the (E33 rule. 
Because of the form of R and ->C in the two branches it also triggers application of 
the ( I -3D rule and possibly other type-completing rules. After such applications, it can 
happen that the labels are not identifiable (anymore) because their types have become 
distinguishable by some concept. That is, any introduction of a new individual in a 
tableau has, in general, a global effect on the provisional model constructed so far. 

The example in Figure |4] illustrates this global effect. Here we are interested in the 
satisfiability of 

(3Q.A) n (3Q'.A) n (3Q".VQ".VQ /_1 .-L) n (VQ".VQ".VQ'- 1 .-L). 

(Recall that VQ".C = ^3Q" .^C and VQ".C = -a-.Q".<7.) At step [TO] none of the type- 
completing rules need to be applied to concepts labelled with a x and a 2 . Although at 
this point a\ and a 2 are labels of the same subconcepts of the given concepts, we cannot 
make them equal (using equality anywhere blocking). The reason i s th at in step [TT1 a 
new individual is introduced which causes a few applications of the fl-3D rule, and as a 
result, at step[2ll the types of a\ and a 2 are now distinguished by the concept 3Q'~ 1 .(Au 
-iA). The example is designed to show that it is not possible to use standard blocking 
techniques to identify individuals (a x and a 2 ) although they are locally complete (that 
is, none of the type completing rules can be applied to t hem), because other individuals 
(ao) can influence a\ and a 2 via the right branch of the fl-iEHI t rule. 

The examples illustrate that a reason for non-termination of Tj^cbo'^ is the possible 
infinite generation of labels. Although the rules respect the well-founded ordering -< 
they do it only with respect to expressions, not labelled expressions (assertions). Fur- 
thermore, it is easy to see that only applications of the rule generate new indi- 
viduals in the branch. Thus, a reason that a branch can be infinite is the unlimited 
application of the rule; it is in fact the only possible reason. It is crucial there- 
fore to have a blocking mechanism that avoids infinite derivations by restricting the 
application of the rule. 

In order to turn the calculus Tacbo"* into a terminating calculus for ACBO"*, we 
introduce a new approach to blocking. 

Let < be an ordering on individuals in the branch which is a linear extension of 
the order of introduction of the individuals during the derivation. That is, let a < a', 
whenever the first appearance of individual a' in the branch is strictly later than the 
first appearance of individual a. 

We add the following rule, called the unrestricted blocking rule, to the calculus. 

fl : { aW: {fl '} 
a : {a'j | a : -i{a '} 

Moreover, we require that the following conditions both hold. 

(cl) If a : {a'} appears in a branch and a < a' then possible applications of the 01 rule 
to expressions of the form a' : 3R.C are not performed within the branch. 
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Fig. 4. Global effect of the introduction of a new individual 



(c2) In every open branch there is some node from which po int onwards before any 
application of the 0! rule all possible applications of the dubb rule have been per- 
formed. 

The intuition of the dubl l rule is that it conjectures whether two labels are equal or 
not. In the left branch two labels are set to be equal. If this does not lead to finding 
a model then the labels cannot be equal. This is the information carried by the right 
branch. Conditions ((Q} and (c|2]> are important to restrict the application of the rule. 
Condition ((Q]! specifies that it may only be applied to labelled expressions where the 
label is the smallest representative of an equivalence class. Condition (c© says that 
from some point onwards in a branch blocking has been applied exhaustively before 
the application of the rule. 

We use the notation T^cbo' 6 ^^ for the extension of T^cbo' 6 with this blocking 
mechanism using the flubl l rule. 

THEOREM 6.1. T^rRr) id ( lubl > is a sound and complete tableau calculus for ACBO" 3 . 

Proof. The dubl > rule is sound in the usual sense (see remarks at the beginning of 
Section©. The blocking conditions (({T]l and ((j2]) are sound in the sense that they cannot 
cause an open branch to become closed. Hence, the blocking rule and the blocking 
conditions can be safely added to any tableau calculus without endangering soundness 
or completeness. As T^cbo' 6 is sound and complete, it follows that T^rKro^dubll is sound 
and complete. □ 
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7. TERMINATION THROUGH UNRESTRICTED BLOCKING 

Next we prove termination. Since every finite set of concepts can be replaced by the 
conjunction of its elements, without loss of generality in this section and the next 
section, we restrict ourselves to a single input concept. 

For every set X, let Card(A') denote the cardinality of X. Let < be reflexive closure 
of the ordering -< which has been defined in Section [5l For every concept D we define 
sub(£»)={D' | D' < D}. 

Let C be the given input concept and n be the length of the concept C. Let k be 
the number of individuals occurring in the input concept assertion a : C. Suppose B 
is an arbitrary open branch in a T^rwro^dubl) tableau for C and 1(B) be the model 
constructed from B as described in Section [5] 

For every ||a|| G A I(B ), let # 3 (||a||) denote the number of applications in B of the 
rule to concepts of the form a' : 3R.D with a' e \\a\\. 

LEMMA 7.1. # 3 (||a||) is finite for every ||a|| G A x( - B \ 

PROOF. Suppose not, that is, # 3 (||a||) is infinite. The number of concepts of the 
form 3R.D where D is not a singleton under labels in the branch is finitely bounded. 
Because the 01 rule is not allowed to be applied to role assertions (that is, concepts 
of the form a : 3R.{a'}) there is a sequence of individuals oo, ai, ■ • . such that every 
a, G ||a|| and the rule has been applied to concepts a : 3R.D, ai : 3R.D, . . . for some 
3R.D ^ C. However, such a situation is impossible because of conditions (cHJ) and (cQ}. 
Indeed, without loss of generality we can assume that a < a < a\ < ■ ■ ■ . Then, by 
Condition ((©, starting from some node of B, as soon as a, appears in B, it is detected 
that a, G || a || before any next application of the Q) rule and, hence, a t is immediately 
blocked for any application of the rule 0, due to Condition (({]}. □ 

Let # 3 (£>) denote the number of applications of the rule in a branch B. Since the 
rule is the only rule that generates new individuals, # 3 (£>) is in fact the number 
of generated individuals in the branch B and the number of all individuals occurring 
in B is k + # 3 (£>). For the the number of all individuals occurring in B we introduce the 
notation i(B), that is, i{B)=k + # 3 (B). 

Let M(B) be the least cardinal which is the upper bound for all # 3 (||a||) where ||a|| 
ranges all the equivalence classes from A 1 ^. That is: 



The following lemma which establishes the upper bound for # 3 (B) is easy to prove. 

Lemma 7.2. # 3 (£) < M(B) ■ Card(A I ( 8 )). 

Furthermore, the following lemma holds. 

LEMMA 7.3. The number of concepts in B does not exceed n ■ i(B) + 2n ■ i(B) 2 . In 
particular, if^(B) is finite then B is finite. 

PROOF. Let D e B. Then D has one of the following forms: 



M(B) ^ sup{# 3 (|| a ||) | H G A I(i3) }. 



D 



D 



(i 



a 




D 



a 



D 



D 



3R.{a'}, where R is a role in sub(C), 
-*3R.{a'}, where R is a role in sub(C) 
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The number of individuals and concepts in sub(C) is bounded by n and the number of 
roles in sub(C) is strictly less than n. Hence, an upper bound for the number of concepts 
in a branch B can be given as: n ■ i(B) + i{B) 2 + i{Bf + (n - 1) • i{B) 2 + (n - 1) • i(Bf = 
n-i(B) + 2n-i(B) 2 . □ 

Clearly if A 1 ^ is finite then M(B) = max{# 3 (||a||) | ||a|| G A I(B) }. Therefore, as a 
consequence of Lemmas l7.2l and l7.3[ we obtain the following statement. 

COROLLARY 7.4. Let B be an open branch in a T^«n id (lu"bl tableau for a concept C. 
Then the branch B is finite iff A I(B ) is finite. 

LEMMA 7.5. Assume that t he in put concept C is satisfiable in a model X. Then there 
is an open branch B in TArKn ici $uEk(C) such that Card(A x(s) ) < Card(A I ). 

PROOF. By induction on application of the rules in Tacbo' 6 $u$(C) we choose an 
appropriate branch B and construct a model J which differs from X only in the inter- 
pretations of individuals occurring in B but not occurring in C, and so that J \= a : D 
for every concept a : D from B. 

More precisely, let A J =A X and A J =A X and Q J =Q X for every concept symbol A 
and role sy mbol Q. Additionally a J =a T for every individual a which occurs in C. In 
Tacbo' 6 ^M(C), we find a branch B as a sequence of nodes So,..., S n , . . . and, for each n, 
we extend interpretation J to individuals in S n such that J \= a : D for every concept 
a : D from S„. It will follow immediately by the induction argument that J \= a : D for 
every concept a : D from B. 

— For the base case of the induction argument we choose the root node of 
TACBO i(i ^^(C) as the initial node <S of the branch B. That is, So = {a Q : C] where a 
is a new individual. Since C is satisfiable in I, there is w in C J . We let a,Q=w. 

— The induction step involves considering cases for each of the rules in the T^rKro id (lubl 
calculus. We consider only two rules, namely 01 and dubl l rules. 

Ot. Suppose a : 3R.D is in the node S n and a : 3R.{a'} and a' : D are the con- 
clusions of the rule. We set S n+ i=S n U {a : 3R.{a'},a' : D}. By the induction 
hypothesis we have that J \= a : 3R.D. That is, there is an element w in A J such 
that (a J , w) G R J and w G D J . We set a' J =w. 

flubl ). Suppose a : {a} and a' : {a'} are in the node S n . By the induction hypothesis 
a J and a' J are both defined. We have two cases: either a J = a' J or a J ^ a' J . We 
let S n+ i=S n U {a : {a'}} in the first case and S n+ i=S n U {a : ->{a'}} in the second 
case. 

Thus, we constructed an appropriate branch B. In order to complete the construction 
of J we set a J =a T for every individual a which does not occur in the constructed 
branch B. Clearly, the model J satisfies the required properties. B is open since the set 
of all concepts from B is satisfiable in the model J. Now let / be a function mapping 
A J (= A 1 ) to A 1 ^) and be defined by: 



By construction of J if w = a J = a' for two different individuals a and a' from the 
branch B then a : {a 1 } G B and, hence, ||a|| = ||a'||. The function / is thus defined 
correctly. Furthermore, / is onto A 1 ' 6 ' because A 1 ' 6 ' = {||a|| | a : {a'} G B}. □ 

Recall the model bounding function ^i( n) ob tained for AC BO^ in Theorem l3.3l /j,(ri) = 
3(n[log(n + 1)J) • 2". Combining Lemma [7.51 with Theorem l3.3l we obtain the following 
theorem. 




arbitrary in A 1 ^ , otherwise. 



if w = a J for some individual a in B, 



20 



R. A. Schmidt and D. Tishkovsky 



1. 

2. 

3. 

4. 

5. 

6. 

7. 

8. 

9. 
10. 
11. 
12. 
13. 
14. 
15. 
16. 
17. 



18. 



19. 



20. 



-\(Q' U Q'). .-\Q.A given 

{ao} <EelIl] 



^Q'.^Q.A 
^Q'.^3Q.A 

"o 

a i 
a i 



3Q'.{a } 

3Q.A 
3Q.{ ai } 
A 

►a 



ESU 



a i 
a i 
a i 
a 2 

0,2 



63 



<E3S 



em 

driflllig] 
1I4TT01 



11 



3Q'.{ ai } 

^BQ.A 

Q.A 

3Q.{a 2 } 

A 

{"2! 

►",) : { " } 

Non-terminating Similarly to lllHTTI 
with a 2 in pl ace of ai 
►a () : {a, } duBIMUl 



(BEES 

<BEE3] 

drifBE] 
dubl ) l2lT0l 



►a, : \Q.A GDil 



►a 



G33H2] 



Fig. 5. Effect of omitting Condition (<J2) 

THEOREM 7.6. Let C be a satisfiable concept and n be the length of C. Then in every 
T Amn^ dubb tableau for C, there exists an open branch B such that Card(A I ( i3 )) < fi(n). 

THEOREM 7.7 (TERMINATION). T AC BO ,(i fcM is a terminating tableau calculus for 
satisfiability in ACBO"*. 

Proof. In any Tat BQ id dubb-tableau. every closed branch is fini te. Suppose there is 
an open branch in the tableau. By the Completeness Theorem 15 . 3 1 this means that the 
input concept is satisfiable. By Theorem 17.61 and Corollary 17.41 there is a finite open 
branch in the tableau. □ 

Notice that Condition ((B is essential for ensuring termination of a r^rwr) id dubl 
derivation. Figure [5] shows that without C<t2J the T/irRro id (lubl tableau for the concept 

-.3(Q / U -^Q').^3Q.A 

would not terminate because new individuals are generated more often than the equal- 
ity conjectures made via the dubb rule. 

In addition, omitting Condition ((Q} causes any tableau for the concept a : 3Q.A 
not to terminate. Thus, the conditi ons (cQ]) and ((O are both necessary conditions for 
termination of the calculus Tdmn i(i iubl. 

8. A COMPLEXITY-OPTIMAL TABLEAU DECISION PROCEDURE 

Our estimations, in this section, for the complexity of tableau procedures based on th e 
Tacbo' 6 ^^ calculus rely on the following two observations. First, from Theorem l7.6l it 
follows that, in a decision procedure based on T ACBO id$ubb, we can ignore any branch B 
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where the cardinality of A 1 ^) is larger than (j,(n). Any such branch is either closed or 
there is an open branch with a smaller number of classes of equal individuals. 

Second, Lemmas 17.31 and 17.21 provide a clue for estimating the number of derivation 
steps (that is, the number of rule applications) in a shortest open branch B. Since the 
maximal number of premises of a rule is two, and none of the rules are applied to the 
same set of premises more than once, if N is the number of concepts in B, then the 
number of derivation steps in B is less than or equal to N 2 . Thus, the following lemma 
holds. 

LEMMA 8.1. Let B be a finite open branch in TArKn^ iubi fC). Then the number of 
derivation steps in B does not exceed 



In order to define a complexity-optimal tableau decision procedure, let us define the 
following derivation strategy. 

Avoid huge branch strategy: Limit the number of derivation ste ps in every 
branch of a tableau derivation to the bound (*) in Lemma 18.11 and do not 
expand branches that become longer. 

Whereas n and k depend only on the given concept C, the value M(B) depends also 
on the particular strategy of applying the ( Tubb rule. In fact, the following lemma holds. 

LEMMA 8.2. In a branch B let M' be the number of individuals occurring strictly 
before the node fro m w hich point onwards, before any application of the 0* rule, all 
applications of the flubl ) rule have been performed in accordance with Condition fcf2}. 
Let n' be the number of concepts of the form 3R.D in sub(C). Then M (B) < M' + n' . 

Proof (sketch). It can be seen from the proof of Lemma I7TT1 that, after the node 
where exhaustive applications of the dubl > rule started, the number of applications of 
the rule to concepts labelled by individuals from the same equivalence class in the 
branch B is restricted by n'. The number of applications of the rule to concepts 
before this node is restricted by the number of individuals which are present before 
that node, that is, by M'. □ 

We note that n' < n, but, depending on the strategy used, M' can have any value. 
However, if a tableau strategy ensures that M' is at most exponential in the length of 
the given concept C then the number of derivation steps in the branch B is also at most 
exponential in the length of C. This is in particular true if Condition is satisfied for 
the first node of the tableau. In this case, Af = 0. This proves the following theorem. 

THEOREM 8.3. The calculus T Arnn^ tiubl ) provides a non-deterministic tableau pro- 
cedure running in NExpTime, when it uses the 'avoid huge branch strategy' together 
with the tableau expansion str ategy ensuring that before any application of the rule 
all possible applications of the iubb rule have been performed. 

This gives a complexity optimal tableau decision procedure for ACBO' 6 . 
9. DETERMINISTIC DECISION PROCEDURES 

We have presented a sound, complete and terminating tableau calculus for ACBO' d . 
The calculus defines the rules, we have defined how a tableau derivation may be con- 
structed and how rules may be applied, but it has not been specified in concrete terms 
how the tableau derivation must be constructed and how the the rules must be applied. 
The presented tableau calculi define only non-deterministic decision procedures. 



(*) 
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When implementing a calculus as a deterministic decision procedure an important 
issue therefore is to decide how to perform the search without loosing the crucial prop- 
erties o f so undness, completeness and termination. As all the rules in the calculus 
T^rRr) id dub"l) are sound, preserving soundness is not problematic. Care is needed for 
preserving completeness and termination. In particular, it is crucial that the search is 
performed in a fair way. A procedure is fair if, when an inference is possible forever, 
then it is p erfo rmed eventually. This means a deterministic tableau procedure based 
on rjrren id (lu"bl may not defer the use of an applicable rule indefinitely. In our context 
fairness must be understood in a global sense. That is, a tableau procedure has to be 
fair not only to expressions in a particular branch but to expressions in all branches of 
a tableau. In other words, a procedure is fair if it makes both the branch selection, and 
the selection of expressions to which to apply a rule, in a fair way. Then soundness, 
completeness and termination carry over from the calculus and we have: 

THEOREM 9.1. Any fair tableau procedure based on TArnn ici iubi is a decision pro- 
cedure for ACBO' d and all its sublogics. 

To illustrate the importance of fairness we give two examples. The concept 



or equivalently (D3Q.A) n (3Q".VQ.-iA), is not satisfiable. Figure [6] gives a depth-first 
left-to-right derivation that is unfair and does not terminate. It can be seen that the 
derivation is infinite because the application of the 0> rule to a : 3Q" .^3QA is de- 
ferred forever and, consequently, a contradiction is not found. This illustrates the im- 
portance of fairness for completeness. 

The next example illustrates the importance of fairness for termination. The concept 



or equivalently 03Q.A, is satisfiable. The derivation in Figure [7] is obtained with a 
depth-first right-to-left strategy. However, the repeated selection of the right branch 
at dubl * choice points, in particular, causes all the individuals in the branch to be pair- 
wise non-equal. The concept a : 3Q.A re-appears repeatedly for every individual a in 
the branch. This triggers the repeated generation of a new individual by the (Q rule, 
resulting in an infinite derivation. This strategy is unfair because all branches except 
for t he right-most branch get ignore d. In the branches right-most with respect to the 
tiubl l rule, it is as if blocking with the iubl rule has never been applied. 

Recall from Section [H a tableau calculus is terminating iff the tableau constructed 
for any finite concept set S is finite whenever T(S) is closed or contains a finite open 
branch if the tableau is open. For a satisfiable concept set this means it is possible to 
construct a finite, fully expanded, ope n branch. Not all branches in an open terminat- 
ing tableau need to be finite though. |Reker [2011| gives an example transferable to 
ACBO l(i for which the left-most open branch in a tableau derivation is infinite. 

An immediate way of obtaining a fair deterministic decision procedure for a termi- 
nating tableau is to use breadth-first search. Another possibility is to use depth-first 
search with iterative deepening. The idea of iterative deepening search is that the 
tableau is expanded up to a fixed depth. If a closed tableau is found or if an open fully 
expanded branch is found then the derivation process stops. If not, then the depth 
is increased and the tableau is constructed up to this depth, and so on. A benefit of 
breadth-first and depth-first iterative deepening strategies is the generation of small 
models. 

Additionally, depth-first search combined with the 'avoid huge branch strategy' pro- 
vides a fair, deterministic decision procedure. 
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Fig. 6. An infinite derivation, due to unfair selection of concepts 

THEOREM 9.2. The following are deterministic decision procedures for ACBO"* and 
all its sublogics: 



(1) Any fair tableau procedure based on TArKn i(i iubi using a breadth-first search strat- 
egy- 

(2) Any fair tableau procedure based on r^/w-> id ( lubl > using a depth- first search strategy 
with iterative deepening. 

(3) Any fair tableau procedure based on TArKn'^ bubb using a depth-first left-to-right 
strategy and the 'avoid huge branch strategy'. 
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Fig. 7. An infinite derivation, due to unfair selection of branches 



Whether a depth-first left-to-right strategy without exploiting the model bound gives 
a decision procedure for ACBO l(i is open. It is in particular open whether there are 
strategies to force the left-most open branch to be finitely bounded. 

10. DISCUSSION 

An important contribution of this paper is the unrestricted blocking mechanism 
based on the unrestricted blocking rule. It is conceptually s imilar but more generic 



than the approach o f reusing domain terms in, for example, | Bry and Manthey 1988 



Bry and Torge 1998 1, where it is used to compute domain minimal models. The follow 
ing rule 

a : 3R.C 

a : 3R.{ao}, ao : C \ ■ ■ ■ | a : 3R.{a n }, a„ : C \ a : 3R.{a'}, a' : C 

where ao, . . . , a„ are all the individuals occurring in the cu rrent branch and a' is a fresh 
individual, is an adaptation of the <5*-rule from Bry et al. [1988: 119981 to the language 
of description logics. Every tableau derivation with this rule can be rewritten to an 
equivalent tableau derivation using the unrestricted blocking rule but not the other 
way around. 

An advantage of the unrestricted blocking mechanism is that it allows to separate 
proofs of termination of tableau calculi from proofs of their soundness and complete- 
ness. In the description, modal and hybrid logic literature blocking mechanisms are 
usually tightly integrated with the tableau rules and the tableau procedure. Sound- 
ness and completeness of the procedure is proved taking into account the given block- 
ing mechanism. This creates in trica cies and conceptual dependencies in the proofs. In 
contrast, blocking based on the dubl l rule is not tied to a specific logic. It can be added to 
any sound and complete tableau calculus without loosing soundness and completeness. 

Exploiting this we have shown that any tableau procedure based on a tableau cal- 
culus extended with this blocking mechanism is guaranteed to terminate if some ad- 
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ditional general conditions are satisfied [Schmidt and Tishkovsky 2008 1. These con- 
ditions are the blocking conditions (cfl]> and ((J2J and fairness of a particular tableau 
strategy used in the tableau procedure, which is essential for the method to work. 
In addition, the effective finite model property must hold and it must be proved by a 
filtration argument correlating in an appropriate way with the original tableau cal- 
cul us. The present paper provide s a different kind of proof for termination to that 
in | Schmidt and Tishkovsky 20081. The proof here can be extended to show termina- 
tion of tableau calculi equipped with the unrestricted blocking mechanism for logics 
for which the effective model property may not hold but the finite model property still 
holds. Proving the finite model property can be involved but proofs of it may already be 
known. This means that known finite model property results can be readily exploited 
to define terminating tableau calculi. We have introduced methods for systemati- 
cally developing semantic tabl eau calculi for modal and related logics MSchmidt 20091 
|Schmidt and Tishkovsky 2011[ . Adding unrestricted blocking turns many of the gen- 
erated tableau calculi into terminating ones. 

The way the blocking mechanism is defined in our calculus means that from some 
point onwards it needs to be used eagerly, as is required by Condition (<|2). This restric- 
tion still leaves a lot of room for different tableau e xpan sion strategies. For example, a 
tableau procedure can postpone applications of the dubl l rule or apply the rule in a non- 
eager way while the provisional model constructed in a branch is not too large. Subtle 
measures and strategies can be devised (for instance, based on run time or available 
memory) for determining when to start applying the blocking rule eagerly. 

Eager application of the blocking rule produces small models. This is beneficial be- 
cause small counter-examples can be produced whereas models generated by standard 
blocking mechanisms are generally larger. With smaller models memory consumption 
can be significantly smaller leading to quicker answers and improved performance. 

On the other hand the blocking rule involves branching and excessive branching can 
degrade performance. It can thus be advantageous to apply blocking only selectively. 
Existing standard blocking mechanisms only identify individuals if certain blocking 
conditions are true. In particular, they are based on inclusion or equality tests on sets 
of expressions that must normally be constructed in a particular way. Individuals are 
identified only implicitly through the use of status variables that identify individuals 
as blocked and blockable. The expansion is usually assumed to be depth-first and the 
rules are usually assumed to be applied in a certain order. The unrestricted blocking 
mechanism is less restrictive and is monotone: there is no blocking test, any individual 
is blockable and blocked individuals remain blocked in a branch. There are conditions 
for the application of the unrestricted blocking rule but they are designed to be as 
weak and permissive as possible. As is shown in this paper none of the conditions can 
be omitted. 

Though standard blocking mechanisms are defined significantly differently, they can 
be viewed as specialisations and adaptations of unrestricted blocking. Standard block- 
ing amounts to the restricted application of blocking, sometimes without change of 
the status of blocked individuals (static blocking), sometimes with change in the sta- 
tus of blocked individuals (dynamic blocking). Restricting applications of blocking re- 
duces the number of branching nodes and the overall search space can be significantly 
smaller. A particular blocking test may need to be realised by an algorithm compli- 
cated enough to create considerable overhead. Ultimately, the trade-off between the 
resources required for blocking tests and excessive branching created as a result of 
applications of the blocking rule is inescapable and needs to be carefully considered. 

Different standard blocking mechanisms are needed for different logics. While 
one blocking mechanism might work for a particular logic it can be incom- 
plete for a more expressive logic. The advantage of unrestricted blocking is auto- 
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m atic soundness and completene ss for any logic. Analysis of the termination proof 



m 



Schmidt and Tishkovsky [200 8] however suggests that, in the case of a particular 
logic, an appropriate blocking test can be extracted from the definition of a filtrated 
model used in the proof of the effective finite model property for the logic. This opens a 
promising direction for further research into devising new blocking tests and blocking 
mechanisms in a systematic way. 

Compared to the tableau calculi of the conference pa- 



per | Schmidt and Tishkovsky 2007 1 there are a few differences in the calculus 
Tacbo^ • Besides the presence of rules for the identity role in Tacbo' 6 , the essen- 
tial difference is that the calculi in the conference version include this additional 
congruence rule: 

.... . a': {a"}, a:3R.{a'} 

(bridge): J 1 . 

a : dn.{a"} 

The results of the present paper show that this rule is superfluous for completeness of 
Tacbo' 6 - (We remark the (|bridge|) rule is sound but not derivable in r^/wo id (lub"l>.) 



Our use of the equa 



lty constraints a {a} in the tableau rules is non- 
standa rd and employs an idea proposed and implemented in M etTeL tableau 
prover [Tishkovsky 2005t|Hustadt et al. 2^06HTishkovsky et al. 2011J. Normally these 



labelled concepts would be deleted by standard simplification rules since a : {a} is 
valid. This would not be correct in our calculus because we use these equality con- 
straints as domain predicates for keeping track of the individuals essential for instan- 
tiation by the 7 rules in the calculus, and ultimately, for keeping track of the individ- 
uals essential for the construction of the model in a tableau branch. Here, by 7 rules 
we mean the rules for universally quantified expressions creating, by repeated appli- 
cation, all instantiations of individuals occurring in conclusions but not in the premise 
(that is, the implicit universally quantified first -ord er variables). The 7 rules of the 
Tacbo' 6 $u$ calculus are the fl-iEHU rule and the dubl l rule. Naively these rules can be 
defined to use all individuals occurring in the input set and all individuals introduced 
by the 0> rule for instantiation but this would create unnecessarily many instances 
and would mean the search space becomes unnecessarily large. The ( H3D rule does not 
require domain predication because this is already achieved by the second premise 
of the rule. Domain predication can be obtained in ot her ways by using an explici t 
concept name r epres enting the domain as is done in |Hustadt and Schmidt [1999Q , 



ISchmidt [2006b| |, and|Baumgartner and Schmidt [2006 1 . If preferred, domain predica 



tion can be omitted and captured by appropriate side-conditions, but then the drefll ) rule 
and the 7 rules need to be reformulated and the proofs adapted slightly. 

Although the proofs in this paper are relatively concise, they are not trivial. They are 
based on the idea that the finite model property for ACBO' ti and termination property 
of the proposed tableau calculus are of the same nature, which is an important contri- 
bution. In particular, it was proved that a finite model (if it exists) can be generated by 
applying the unrestricted blocking rule eagerly within the branch. 

While our tableau approach is in line with existing semantic tableau approaches de- 
scribed in the description, modal and hybrid logic literature, our presentation departs 
in significant ways from other presentations. To make the approach and the results as 
general as possible, we have presented it in terms of an abstract deduction calculus 
given by a set of inference rules without making any assumptions about how branch 
selection is performed, how tableau derivations are constructed, in which order the 
rules are applied, which individuals are blockable and the need for using status vari- 
ables. Another difference is that we view a tableau to be a (tree) derivation rather 
than a model as is the tendency in the description logic literature. In our context mod- 
els are in general not tree models or even tree-like, because ACBO"* does not have the 
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tree-model property. The unrestricted blocking rule can identify any pair of individuals 
meaning that any structural properties, like being a tree model, are easily lost. This 
shift in perspective is useful for developing tableau approaches for description logics 
without a form of tree model property. 

Practical considerations such as branch selection order, rule application order, 
search strategies and heuristics are important considerations when embarking on 
an implementation. We touched on practical aspects and described general notions of 
fairness providing minimal conditions to guarantee sound, complete and terminating 
deterministic tableau procedures. The standard optimisations such as simplification, 
backjumping, dynamic backtracking, different heuristics for branch selection and rule 
selection, lemma generation, et cetera, are all compatible with the presented calculi 
and procedures. An obvious simplification, for example, is the on-the-fly removal of 
double negations from concepts, and especially from roles, as this reduces a number of 
applications of the fl-iEHD rule. 

The unrestricted block i ng mechanism has bee n implemented in MetTeL tableau 
prover [Tish kovsky 2005} Tishkovsky et al. 2011[ , its successor, the prover generator 
MetTeI 2 |Tishkovsky et al. 2012| |, and the MSPASS first-order resolution theorem 
prover. Tests with various description logic problems and problems in the TPTP library 
show that the general termination mechanism by means of the unrestricted blocking 



rule does work in practice [Baumgartner and Schmidt 2008 1. A more thorough discus- 
sion of these implementations and other practical aspects, let alone performance re- 
sults, is beyond the scope of the paper. 

11. CONCLUSION 

We have presented a new, general tableau approach for deciding expressive description 
logics with complex role operators, including 'non-safe' occurrences of role negation. 
The tableau decision procedures found in the description logic literature, and imple- 
mented in existing tableau-based description logic systems, can handle a large class of 
description logics, but cannot currently handle description logics with full role nega- 
tion such as ACB, ACBO or ACBO"*. The present paper closes this gap. The introduced 
blocking mechanism opens the way for improving the OWL 2 standard to cover larger 
decidable fragments of first-order logic and larger fragments of natural language than 
it currently does, with obvious benefits for applications of the semantic web. 
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